Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/955ee936-4c4c-3f86-a15b-c1d6b86d88b7.roa
File:                     955ee936-4c4c-3f86-a15b-c1d6b86d88b7.roa (raw, json)
Hash identifier:          GsAWP9Z78PMXg6CJeKhrRbj16SX/Go+0iQr/U7eK0TE=
Subject key identifier:   F4:DF:62:A2:B4:45:2E:37:34:06:77:B7:73:4E:C2:D7:73:5B:DD:CC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B52A757E79381A2B952ED10E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/955ee936-4c4c-3f86-a15b-c1d6b86d88b7.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     22427
IP address blocks:        66.78.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:57:e7:93:81:a2:b9:52:ed:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=ddfb9d17-805a-4ce7-897a-49af7467b902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:94:87:98:b4:43:37:d6:22:11:46:39:46:
                    29:fb:9d:36:fa:1b:bb:d9:99:86:a0:b5:d7:95:94:
                    c7:17:5f:d8:07:a9:c2:b3:21:12:3c:5e:2b:86:71:
                    67:0f:4f:e0:b3:d6:fe:a4:8a:bf:d7:06:82:e6:d5:
                    e8:44:48:c1:c5:59:5e:36:c5:36:b0:d1:68:08:4e:
                    78:95:74:a2:e6:f2:28:f0:21:b9:9c:e7:61:56:6a:
                    ea:0d:bc:88:fb:63:e9:95:3e:24:bc:16:ff:b9:fb:
                    c7:09:4b:63:bc:fd:73:74:8b:c0:2c:85:f4:a7:09:
                    c6:14:8b:9a:c0:57:f3:ad:8f:cb:d0:e8:35:f7:fb:
                    b4:c6:ba:3b:26:b5:ff:ea:2a:79:d2:14:9d:43:88:
                    d5:b2:8a:a0:4a:bd:d7:dd:62:f5:3b:60:5e:5d:be:
                    c1:f6:81:18:4d:ae:1a:c0:1a:8f:f5:b6:08:77:c7:
                    b2:a2:bd:68:d8:13:d6:0e:ba:0f:7d:55:bf:74:e5:
                    3a:a4:6a:15:fb:e5:5d:34:84:8b:16:9a:db:6d:5b:
                    7f:a0:50:06:e1:5d:c4:25:da:e5:3d:6a:40:d8:79:
                    32:e2:ea:e9:ae:91:30:35:d4:de:ec:29:f2:fd:26:
                    6b:40:5b:53:ad:b6:2f:aa:ff:fc:bd:c9:fa:63:1e:
                    fa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:62:A2:B4:45:2E:37:34:06:77:B7:73:4E:C2:D7:73:5B:DD:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/955ee936-4c4c-3f86-a15b-c1d6b86d88b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:7b:e4:f1:f5:4b:16:cb:3f:5f:ec:96:86:9e:78:df:fb:63:
         58:a2:65:86:fd:94:c1:87:f5:66:4a:93:df:62:9d:df:2d:b4:
         0b:c9:10:42:fe:a0:8d:0c:45:99:b3:35:76:84:9e:b1:79:c2:
         09:cd:42:e5:80:1f:c7:04:3a:a3:b7:23:44:3c:60:9e:9f:28:
         dd:a1:e6:c6:98:46:f4:62:b0:b1:03:e0:73:db:25:14:a7:11:
         5b:30:da:2f:4d:f1:d4:91:f5:ed:20:ca:7e:db:b0:61:ab:b4:
         8d:ec:d1:4d:df:b8:5d:c2:d0:2a:3f:08:b0:a8:87:81:07:1a:
         4a:f6:f5:8b:ca:7f:72:95:c5:6a:aa:8f:71:ea:82:e4:a5:6a:
         ac:e6:83:f4:7d:72:b7:e4:41:11:59:40:c2:90:42:3a:4e:6f:
         01:a3:34:59:ef:7b:45:e9:f6:f4:95:43:8e:49:60:d5:60:5a:
         4c:6d:a4:13:29:d0:1c:b0:f0:ab:33:f4:d6:fd:01:00:59:99:
         57:51:28:9b:f2:03:9b:2d:12:2f:85:19:94:60:08:f0:18:ab:
         d5:57:3f:9e:a0:dd:88:94:53:81:39:cb:ac:17:7f:ca:3b:0d:
         f4:95:2f:cf:81:15:28:9a:b2:1e:34:41:11:b2:fc:48:b2:b8:
         6f:84:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:24 2025 by rpki-client